Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133322e302f32322d3232203d3e203232313737.roa
File:                     3230302e3136322e3133322e302f32322d3232203d3e203232313737.roa (raw, json)
Hash identifier:          oCtN2yAjLZeqh/bZOKeklaKPoTClzmmyqncsveMHb+s=
Subject key identifier:   F6:A7:7B:C6:CC:A6:06:8E:75:E8:51:CB:C2:E3:A2:42:72:76:D7:50
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       1771B36F187588F64E7229D03A9F34C69F0B8DD3
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133322e302f32322d3232203d3e203232313737.roa
Signing time:             Sat 05 Jul 2025 20:30:21 +0000
ROA not before:           Sat 05 Jul 2025 20:25:21 +0000
ROA not after:            Sat 04 Jul 2026 20:30:21 +0000
asID:                     22177
IP address blocks:        200.162.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 15:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:71:b3:6f:18:75:88:f6:4e:72:29:d0:3a:9f:34:c6:9f:0b:8d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Jul  5 20:25:21 2025 GMT
            Not After : Jul  4 20:30:21 2026 GMT
        Subject: CN=F6A77BC6CCA6068E75E851CBC2E3A2427276D750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:84:09:8e:3b:8b:f3:28:a7:74:4c:6a:f3:9e:
                    99:27:bd:9a:b1:fd:67:db:c4:8e:c8:ff:42:02:49:
                    03:6b:8c:da:0e:26:55:e1:c0:a2:e7:7f:2c:cd:e3:
                    4a:21:6b:1d:71:1e:a9:3f:13:3f:f7:55:7a:f0:22:
                    b7:a4:4f:cd:8c:db:a6:6b:e3:30:6d:6b:92:ed:4f:
                    0c:17:77:73:a6:73:1e:11:1d:62:c6:3c:08:fe:70:
                    5c:09:9e:71:62:f2:36:1f:67:28:0e:c9:8f:41:f5:
                    ff:a0:80:ee:9c:4b:99:d3:96:49:b2:c1:34:1a:3c:
                    81:aa:c3:33:01:b0:7e:50:88:49:95:49:81:86:0b:
                    83:98:98:b8:80:2f:90:e4:6e:12:fa:cb:30:54:97:
                    91:fe:55:ef:8e:73:1d:bd:a3:07:05:6a:9d:00:d9:
                    cd:31:90:00:29:41:e8:bd:af:2a:63:75:f7:ff:f0:
                    70:7a:05:dd:da:e0:9d:ba:be:60:35:b9:f4:c8:d0:
                    cc:55:fe:72:4c:ae:73:e3:45:d7:fd:6c:2a:75:f7:
                    67:89:71:ac:ac:39:6b:a6:07:e1:ca:2b:0f:00:38:
                    e8:42:52:26:62:43:d1:91:85:91:d6:94:c1:c8:f8:
                    21:ed:1f:9e:60:11:25:b4:f8:f7:15:10:c7:e2:7e:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A7:7B:C6:CC:A6:06:8E:75:E8:51:CB:C2:E3:A2:42:72:76:D7:50
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3133322e302f32322d3232203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:f6:31:c9:97:b1:d4:b9:2d:83:ab:1f:fd:ff:0e:96:a0:18:
         e2:73:ca:5a:8b:22:f0:bf:8a:09:4e:d5:de:b2:b3:3b:24:91:
         99:79:d1:d3:43:46:89:46:7f:18:58:33:52:cf:a9:60:78:45:
         6e:0e:1d:c8:d9:53:ae:9c:45:37:1c:4a:3e:da:58:26:b2:b4:
         21:3e:99:b6:20:3b:2d:03:94:5f:1d:a0:46:1e:63:65:15:b1:
         f3:68:90:0a:fe:09:fc:b7:51:40:07:12:d3:19:2b:33:ca:4e:
         13:7e:99:1b:f2:5e:8b:8d:a3:c2:24:9f:f2:70:9b:a6:c5:5f:
         b3:fe:35:11:09:68:1e:7d:03:f8:be:f1:42:ac:2c:16:17:47:
         b6:8f:a1:e8:08:c6:b6:90:d2:a5:68:0b:17:d4:68:0d:09:a9:
         9a:30:a4:cb:9a:89:89:10:52:35:90:0e:aa:35:15:80:f8:6b:
         b5:31:d4:84:c1:0a:6e:f1:95:b7:3b:27:b4:63:d8:04:50:5f:
         ef:49:1f:82:ed:3e:63:ee:b8:0a:3d:ff:3d:d5:d9:ad:8b:4c:
         b9:ca:06:9f:4f:6d:3b:f6:a9:6f:ef:1f:22:48:dc:54:20:b9:
         83:49:24:93:8c:d1:2d:3d:dd:b3:0b:ff:97:15:07:b6:b6:38:
         98:ae:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:49:06 2025 by rpki-client